@sixb/core 0.1.20 → 0.1.21

package/dist/artifacts/limits.d.ts

@@ -0,0 +1,28 @@
+/** What one version may hold. Publishing refuses a version over any of these. */
+export declare const ARTIFACT_LIMITS: {
+    readonly maxFiles: 200;
+    readonly maxFileBytes: number;
+    readonly maxVersionBytes: number;
+    readonly maxPathLength: 512;
+    readonly maxTitleLength: 200;
+    /** A document's Markdown is parsed whole when it is published. */
+    readonly maxDocumentBytes: number;
+    readonly maxThemeBytes: number;
+    readonly maxWorkbookBytes: number;
+    /** A sheet's limits keep the grid quick and its charts readable. */
+    readonly maxSheets: 20;
+    readonly maxSheetRows: 100000;
+    /** The viewer reads a sheet whole, and reads at most this much. */
+    readonly maxSheetFileBytes: number;
+    readonly maxSheetColumns: 200;
+    readonly maxCharts: 10;
+    readonly maxChartSeries: 5;
+    /** One slice per theme chart color, so no two slices share one. */
+    readonly maxPieSlices: 5;
+    /** A deck's `index.html` is parsed whole when it is published. */
+    readonly maxDeckBytes: number;
+    readonly maxSlides: 100;
+    /** `artifact:` addresses one version may use. */
+    readonly maxReferences: 200;
+};
+//# sourceMappingURL=limits.d.ts.map

package/dist/artifacts/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/artifacts/limits.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,eAAO,MAAM,eAAe;;;;;;IAM1B,kEAAkE;;;;IAIlE,oEAAoE;;;IAGpE,mEAAmE;;;;;IAKnE,mEAAmE;;IAEnE,kEAAkE;;;IAGlE,iDAAiD;;CAEzC,CAAA"}

package/dist/artifacts/outline.d.ts

@@ -0,0 +1,44 @@
+/**
+ * What a version contains, read from its files when it is published. Addresses resolve against
+ * it, and previews and hover cards show it without opening the files.
+ */
+export type ArtifactOutline = DocumentOutline | SheetOutline | SlidesOutline | FileOutline;
+export interface DocumentOutline {
+    readonly kind: "document";
+    readonly headings: readonly DocumentHeading[];
+}
+export interface DocumentHeading {
+    readonly depth: number;
+    readonly text: string;
+    /** What `#part` names in an address to this section. */
+    readonly slug: string;
+}
+export interface SheetOutline {
+    readonly kind: "sheet";
+    readonly sheets: readonly SheetSummary[];
+    /** The names of the charts declared in the workbook. */
+    readonly charts: readonly string[];
+}
+export interface SheetSummary {
+    readonly name: string;
+    readonly rows: number;
+    readonly columns: readonly string[];
+}
+export interface SlidesOutline {
+    readonly kind: "slides";
+    /** One entry per slide, in order; the title is the slide's first heading. */
+    readonly slides: readonly {
+        readonly title?: string;
+    }[];
+}
+export interface FileOutline {
+    readonly kind: "file";
+    readonly mediaType: string;
+}
+/**
+ * Turns a document's heading texts, in order, into their section slugs: lowercase, punctuation
+ * dropped, spaces as hyphens, and `-1`, `-2` after a repeat. Publishing and the renderer both name
+ * sections with it, so an address to a section finds the heading the reader sees.
+ */
+export declare function createHeadingSlugger(): (text: string) => string;
+//# sourceMappingURL=outline.d.ts.map

package/dist/artifacts/outline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outline.d.ts","sourceRoot":"","sources":["../../src/artifacts/outline.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,eAAe,GAAG,YAAY,GAAG,aAAa,GAAG,WAAW,CAAA;AAE1F,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAA;CAC9C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;IACxC,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACxD;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAc/D"}

package/dist/artifacts/publish/files.d.ts

@@ -0,0 +1,15 @@
+import type { BlobStorage } from "../../blob-storage/types";
+import type { ArtifactFile } from "../../storage/artifacts/types";
+import { ArtifactRequestError } from "../errors";
+export type ArtifactBlobStorage = Pick<BlobStorage, "stat" | "open">;
+/**
+ * Checks a version's files before anything reads them: safe unique paths, the per-version limits,
+ * and stored bytes that match each reference.
+ */
+export declare function checkArtifactFiles(blobStorage: ArtifactBlobStorage, files: readonly ArtifactFile[]): Promise<void>;
+/** The file at `path`, read as UTF-8 text when it is no larger than `maxBytes`. */
+export declare function readArtifactText(blobStorage: ArtifactBlobStorage, file: ArtifactFile, maxBytes: number): Promise<string>;
+/** Relative, `/`-separated, no empty, `.`, or `..` segment, no backslash or control character. */
+export declare function isArtifactPath(path: string): boolean;
+export declare function invalidArtifact(message: string): ArtifactRequestError;
+//# sourceMappingURL=files.d.ts.map

package/dist/artifacts/publish/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../../src/artifacts/publish/files.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAE3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAGhD,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;AAEpE;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,mBAAmB,EAChC,KAAK,EAAE,SAAS,YAAY,EAAE,GAC7B,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED,mFAAmF;AACnF,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,mBAAmB,EAChC,IAAI,EAAE,YAAY,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,kGAAkG;AAClG,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUpD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,CAErE"}

package/dist/artifacts/publish/index.d.ts

@@ -0,0 +1,5 @@
+/** Publishing for this repo's packages: the Agent publishes through the same checks as the API. */
+export { isArtifactId } from "../ids";
+export { ARTIFACT_LIMITS } from "../limits";
+export { artifactVersionWarnings, type PreparedArtifactVersion, type PublishArtifactInput, prepareArtifactVersion, publishArtifact, storeArtifactVersion, } from "./publish";
+//# sourceMappingURL=index.d.ts.map

package/dist/artifacts/publish/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/artifacts/publish/index.ts"],"names":[],"mappings":"AAAA,mGAAmG;AAEnG,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EACL,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,sBAAsB,EACtB,eAAe,EACf,oBAAoB,GACrB,MAAM,WAAW,CAAA"}

package/dist/artifacts/publish/index.js

@@ -0,0 +1,36 @@
+// @bun
+import {
+  isArtifactId2,
+  ARTIFACT_LIMITS2
+} from "../../chunk-mjddfa7k.js";
+import"../../chunk-7q8t23v4.js";
+import"../../chunk-wkv3h3q7.js";
+import"../../chunk-nn5xnx3s.js";
+import"../../chunk-dhdha526.js";
+import"../../chunk-dvd2fp9q.js";
+import"../../chunk-6eqsgvxk.js";
+import"../../chunk-6vb4st8k.js";
+import"../../chunk-v4jbb3rs.js";
+import"../../chunk-8frc8a4j.js";
+import"../../chunk-f4pamkt9.js";
+import"../../chunk-s7jg7pmn.js";
+import"../../chunk-hcbyfxbe.js";
+import"../../chunk-48qjhh6v.js";
+import {
+  publishArtifact2,
+  prepareArtifactVersion2,
+  storeArtifactVersion2,
+  artifactVersionWarnings2
+} from "../../chunk-9kgkfg6v.js";
+import"../../chunk-447a5c0p.js";
+import"../../chunk-a3faa34j.js";
+export {
+  ARTIFACT_LIMITS2 as ARTIFACT_LIMITS,
+  artifactVersionWarnings2 as artifactVersionWarnings,
+  isArtifactId2 as isArtifactId,
+  prepareArtifactVersion2 as prepareArtifactVersion,
+  publishArtifact2 as publishArtifact,
+  storeArtifactVersion2 as storeArtifactVersion
+};
+
+//# debugId=E074876D2B70C49764756E2164756E21

package/dist/artifacts/publish/index.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "E074876D2B70C49764756E2164756E21",
+  "names": []
+}

package/dist/artifacts/publish/publish.d.ts

@@ -0,0 +1,52 @@
+import type { Principal } from "../../auth";
+import type { ArtifactFile, ArtifactOrigin, ArtifactRecord, ArtifactStorage, ArtifactVersionInput, ArtifactVersionRecord, PublishedArtifactVersion } from "../../storage/artifacts/types";
+import type { ArtifactKind } from "../kinds";
+import type { ArtifactWarning } from "../warnings";
+import { type ArtifactBlobStorage } from "./files";
+export interface PublishArtifactContext {
+    readonly projectId: string;
+    readonly storage: ArtifactStorage;
+    readonly blobStorage: ArtifactBlobStorage;
+}
+export interface PublishArtifactInput {
+    /** Publishes the next version of this artifact; without it, a new artifact is created. */
+    readonly artifactId?: string;
+    readonly kind: ArtifactKind;
+    readonly title: string;
+    readonly files: readonly ArtifactFile[];
+    /** Publishes the version, and owns the artifact when this creates it. */
+    readonly author: Principal;
+    readonly origin?: ArtifactOrigin;
+}
+export interface PublishedArtifact {
+    readonly artifact: ArtifactRecord;
+    readonly version: ArtifactVersionRecord;
+    readonly warnings: readonly ArtifactWarning[];
+}
+/** A version checked against its kind and with its addresses resolved, ready to store. */
+export interface PreparedArtifactVersion {
+    readonly artifactId?: string;
+    readonly kind: ArtifactKind;
+    readonly author: Principal;
+    readonly version: ArtifactVersionInput;
+}
+/**
+ * Validates a version against its kind and stores it. Who may publish is the caller's decision:
+ * this checks only what the version holds.
+ */
+export declare function publishArtifact(context: PublishArtifactContext, input: PublishArtifactInput): Promise<PublishedArtifact>;
+/**
+ * Everything publishing checks before it stores: the title, the files, the theme, the kind's own
+ * format, and every address, resolved against what the author can read. It reads the files back
+ * and parses them, so a caller that stores inside a transaction prepares outside it.
+ */
+export declare function prepareArtifactVersion(context: PublishArtifactContext, input: PublishArtifactInput): Promise<PreparedArtifactVersion>;
+/** Stores a prepared version: the next one of its artifact, or the first of a new one. */
+export declare function storeArtifactVersion(context: PublishArtifactContext, prepared: PreparedArtifactVersion): Promise<PublishedArtifactVersion>;
+/**
+ * What a stored version breaks in other artifacts that show it. A first version breaks nothing:
+ * no other artifact could name it yet. The version is stored by now, so a failed check only loses
+ * the warnings.
+ */
+export declare function artifactVersionWarnings(context: PublishArtifactContext, prepared: PreparedArtifactVersion, stored: PublishedArtifactVersion): Promise<readonly ArtifactWarning[]>;
+//# sourceMappingURL=publish.d.ts.map

package/dist/artifacts/publish/publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../../src/artifacts/publish/publish.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAE3C,OAAO,KAAK,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,+BAA+B,CAAA;AAGtC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAI5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EACL,KAAK,mBAAmB,EAIzB,MAAM,SAAS,CAAA;AAOhB,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAA;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAA;IACvC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;IACvC,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAA;CAC9C;AAID,0FAA0F;AAC1F,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;CACvC;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAI5B;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,uBAAuB,CAAC,CAwBlC;AAED,0FAA0F;AAC1F,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAAC,wBAAwB,CAAC,CAInC;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,EAAE,uBAAuB,EACjC,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAerC"}

package/dist/artifacts/publish/references.d.ts

@@ -0,0 +1,27 @@
+import { type Principal } from "../../auth";
+import type { ArtifactRecord, ArtifactStorage, ArtifactVersionRecord } from "../../storage/artifacts/types";
+import type { ArtifactReference } from "../references";
+import type { ArtifactWarning } from "../warnings";
+/** An address a validator found in a version, before it is resolved. */
+export type FoundReference = Omit<ArtifactReference, "resolvedVersion">;
+interface ReferenceContext {
+    readonly projectId: string;
+    readonly storage: ArtifactStorage;
+    /** Who publishes: an address resolves only to artifacts they can read. */
+    readonly author: Principal;
+    /** The artifact being published, which an address may not name. */
+    readonly artifactId?: string;
+}
+/**
+ * Resolves every address a version uses against what its author can read, recording the version
+ * each one resolved to. An address that resolves to nothing refuses the version, saying where it
+ * is and what the target has instead.
+ */
+export declare function resolveReferences(context: ReferenceContext, found: readonly FoundReference[]): Promise<ArtifactReference[]>;
+/**
+ * The artifacts a new version breaks: each one whose latest version follows this artifact's latest
+ * and names something this version no longer has. Only artifacts the author can read are named.
+ */
+export declare function brokenDependents(context: ReferenceContext, artifact: ArtifactRecord, version: ArtifactVersionRecord): Promise<ArtifactWarning[]>;
+export {};
+//# sourceMappingURL=references.d.ts.map

package/dist/artifacts/publish/references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"references.d.ts","sourceRoot":"","sources":["../../../src/artifacts/publish/references.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAmB,MAAM,YAAY,CAAA;AAC5D,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,qBAAqB,EACtB,MAAM,+BAA+B,CAAA;AAGtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAEtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAGlD,wEAAwE;AACxE,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAA;AAEvE,UAAU,gBAAgB;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,SAAS,cAAc,EAAE,GAC/B,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAuD9B;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,eAAe,EAAE,CAAC,CA0B5B"}

package/dist/artifacts/publish/validate/document.d.ts

@@ -0,0 +1,17 @@
+import type { ArtifactFile } from "../../../storage/artifacts/types";
+import { type DocumentOutline } from "../../outline";
+import { type ArtifactBlobStorage } from "../files";
+import type { FoundReference } from "../references";
+/** The file a document renders from. */
+export declare const DOCUMENT_ENTRY = "document.md";
+/**
+ * Reads a document's Markdown: its headings become the outline, and every image must be a file in
+ * the version or an `artifact:` address, so the document renders the same wherever it is opened.
+ * The addresses it shows and links to are returned with the section each sits in, to resolve.
+ */
+export declare function validateDocument(blobStorage: ArtifactBlobStorage, files: readonly ArtifactFile[]): Promise<{
+    readonly entry: string;
+    readonly outline: DocumentOutline;
+    readonly references: readonly FoundReference[];
+}>;
+//# sourceMappingURL=document.d.ts.map

package/dist/artifacts/publish/validate/document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../../../src/artifacts/publish/validate/document.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAIpE,OAAO,EAA8C,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA;AAChG,OAAO,EAAE,KAAK,mBAAmB,EAAqC,MAAM,UAAU,CAAA;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD,wCAAwC;AACxC,eAAO,MAAM,cAAc,gBAAgB,CAAA;AAE3C;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,mBAAmB,EAChC,KAAK,EAAE,SAAS,YAAY,EAAE,GAC7B,OAAO,CAAC;IACT,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAA;CAC/C,CAAC,CAmED"}

package/dist/artifacts/publish/validate/file.d.ts

@@ -0,0 +1,8 @@
+import type { ArtifactFile } from "../../../storage/artifacts/types";
+import type { FileOutline } from "../../outline";
+/** A file artifact is one file of any type, delivered as it is. */
+export declare function validateFileArtifact(files: readonly ArtifactFile[]): {
+    readonly entry: string;
+    readonly outline: FileOutline;
+};
+//# sourceMappingURL=file.d.ts.map

package/dist/artifacts/publish/validate/file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../../../src/artifacts/publish/validate/file.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAGhD,mEAAmE;AACnE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,GAAG;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAC9B,CASA"}

package/dist/artifacts/publish/validate/sheet.d.ts

@@ -0,0 +1,15 @@
+import type { ArtifactFile } from "../../../storage/artifacts/types";
+import type { SheetOutline } from "../../outline";
+import { type ArtifactBlobStorage } from "../files";
+import type { FoundReference } from "../references";
+/**
+ * Reads a sheet: `workbook.json`, then each sheet's CSV against it. Every cell of a typed column
+ * must read as its type and every chart must name columns its sheet has, so the grid formats and
+ * the charts draw the same wherever the sheet is opened.
+ */
+export declare function validateSheet(blobStorage: ArtifactBlobStorage, files: readonly ArtifactFile[]): Promise<{
+    readonly entry: string;
+    readonly outline: SheetOutline;
+    readonly references: readonly FoundReference[];
+}>;
+//# sourceMappingURL=sheet.d.ts.map

package/dist/artifacts/publish/validate/sheet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sheet.d.ts","sourceRoot":"","sources":["../../../../src/artifacts/publish/validate/sheet.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAIpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAYjD,OAAO,EAAE,KAAK,mBAAmB,EAAqC,MAAM,UAAU,CAAA;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,mBAAmB,EAChC,KAAK,EAAE,SAAS,YAAY,EAAE,GAC7B,OAAO,CAAC;IACT,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAA;CAC/C,CAAC,CA6CD"}

package/dist/artifacts/publish/validate/slides.d.ts

@@ -0,0 +1,21 @@
+import type { ArtifactFile } from "../../../storage/artifacts/types";
+import type { SlidesOutline } from "../../outline";
+import { type ArtifactBlobStorage } from "../files";
+import type { FoundReference } from "../references";
+/** The file a deck renders from. */
+export declare const SLIDES_ENTRY = "index.html";
+/** Where the frame serves the kit and the runtime, beside a deck's own files. */
+export declare const FRAME_ASSET_PREFIX = "__sixb/";
+/**
+ * Reads a deck: `index.html` with one `<section class="slide">` per 1280×720 slide, and the files
+ * it loads beside it. Each slide's first heading becomes its title in the outline. The `artifact:`
+ * addresses it uses are returned with the slide each is on, to resolve: links (`<a href>`), files
+ * it shows from other artifacts (`<img src>`), and anything else it shows (`<sixb-embed src>`), a
+ * chart, a range, a section, or a slide, which the app draws over the frame.
+ */
+export declare function validateSlides(blobStorage: ArtifactBlobStorage, files: readonly ArtifactFile[]): Promise<{
+    readonly entry: string;
+    readonly outline: SlidesOutline;
+    readonly references: readonly FoundReference[];
+}>;
+//# sourceMappingURL=slides.d.ts.map

package/dist/artifacts/publish/validate/slides.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slides.d.ts","sourceRoot":"","sources":["../../../../src/artifacts/publish/validate/slides.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAIpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAClD,OAAO,EAAE,KAAK,mBAAmB,EAAqC,MAAM,UAAU,CAAA;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD,oCAAoC;AACpC,eAAO,MAAM,YAAY,eAAe,CAAA;AAExC,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,YAAY,CAAA;AAE3C;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,mBAAmB,EAChC,KAAK,EAAE,SAAS,YAAY,EAAE,GAC7B,OAAO,CAAC;IACT,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAA;CAC/C,CAAC,CAyGD"}

package/dist/artifacts/references.d.ts

@@ -0,0 +1,12 @@
+/** An `artifact:` address a version uses, recorded when the version is published. */
+export interface ArtifactReference {
+    /** The address as written, such as `artifact:art_k3m9q2x7tp#chart=revenue`. */
+    readonly address: string;
+    /** An embed shows the target in place; a link opens it. */
+    readonly as: "embed" | "link";
+    /** Where the address sits in its host: a heading slug, a slide number, or a sheet cell. */
+    readonly at: string;
+    /** The target's version when this version was published, so later changes can be told apart. */
+    readonly resolvedVersion: number;
+}
+//# sourceMappingURL=references.d.ts.map

package/dist/artifacts/references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"references.d.ts","sourceRoot":"","sources":["../../src/artifacts/references.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM,CAAA;IAC7B,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,gGAAgG;IAChG,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CACjC"}

package/dist/artifacts/resolve.d.ts

@@ -0,0 +1,41 @@
+import { type ArtifactAddress, type CellRange } from "./address";
+import type { ArtifactKind } from "./kinds";
+import type { ArtifactOutline } from "./outline";
+/** The version an address points into: its kind, its outline, and its file list. */
+export interface ArtifactAddressTarget {
+    readonly kind: ArtifactKind;
+    readonly outline: ArtifactOutline;
+    readonly files: readonly {
+        readonly path: string;
+    }[];
+}
+/** What an address names inside its target. */
+export type ResolvedArtifactPart = {
+    readonly type: "artifact";
+} | {
+    readonly type: "file";
+    readonly path: string;
+} | {
+    readonly type: "sheet";
+    readonly sheet: string;
+    readonly range?: CellRange;
+} | {
+    readonly type: "chart";
+    readonly chart: string;
+} | {
+    readonly type: "section";
+    readonly slug: string;
+} | {
+    readonly type: "slide";
+    readonly slide: number;
+};
+/**
+ * Finds what an address names in a version, against its outline and files. A problem says what is
+ * missing and what the version has instead, so whoever wrote the address can fix it.
+ */
+export declare function resolveArtifactAddress(address: ArtifactAddress, target: ArtifactAddressTarget): {
+    readonly part: ResolvedArtifactPart;
+} | {
+    readonly problem: string;
+};
+//# sourceMappingURL=resolve.d.ts.map

package/dist/artifacts/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/artifacts/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,SAAS,EAAkB,MAAM,WAAW,CAAA;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAEhD,oFAAoF;AACpF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACrD;AAED,+CAA+C;AAC/C,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtD;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,qBAAqB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA+DxE"}

package/dist/artifacts/theme.d.ts

@@ -0,0 +1,19 @@
+/** An artifact may carry this file at its root to override the app's theme. */
+export declare const ARTIFACT_THEME_FILE = "theme.json";
+/**
+ * An artifact's own theme. `mode` pins light or dark whatever the viewer's app uses; `tokens`
+ * override the app's values for the names in {@link ARTIFACT_THEME_TOKENS}.
+ */
+export interface ArtifactTheme {
+    readonly mode?: "light" | "dark";
+    readonly tokens?: Readonly<Record<string, string>>;
+}
+/** The tokens a theme may set. Every other app token stays the app's. */
+export declare const ARTIFACT_THEME_TOKENS: readonly string[];
+/** Reads a `theme.json`. Returns the reason it was refused, in words the author can act on. */
+export declare function parseArtifactTheme(text: string): {
+    readonly theme: ArtifactTheme;
+} | {
+    readonly error: string;
+};
+//# sourceMappingURL=theme.d.ts.map

package/dist/artifacts/theme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme.d.ts","sourceRoot":"","sources":["../../src/artifacts/theme.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,eAAe,CAAA;AAE/C;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CACnD;AAsBD,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAIlD,CAAA;AAWD,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,GACX;IAAE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CA2ChE"}

package/dist/artifacts/warnings.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Something about a published version worth fixing that did not stop it from publishing. A warning
+ * names the part it concerns, so a viewer can point at it.
+ */
+export interface ArtifactWarning {
+    readonly code: string;
+    readonly message: string;
+    /** The slide, sheet, section, or file the warning is about. */
+    readonly part?: string;
+}
+//# sourceMappingURL=warnings.d.ts.map

package/dist/artifacts/warnings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"warnings.d.ts","sourceRoot":"","sources":["../../src/artifacts/warnings.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB"}

package/dist/artifacts/workbook.d.ts

@@ -0,0 +1,64 @@
+/**
+ * A sheet artifact is `workbook.json` and one CSV per sheet under `sheets/`. The CSV holds the
+ * values; the workbook holds what CSV can't: sheet order, column types and formats, frozen rows
+ * and columns, widths, and charts drawn from the sheets. Formulas belong in an `.xlsx` file.
+ */
+export declare const WORKBOOK_FILE = "workbook.json";
+export declare const SHEET_COLUMN_TYPES: readonly ["text", "number", "currency", "percent", "date", "link", "image"];
+export type SheetColumnType = (typeof SHEET_COLUMN_TYPES)[number];
+/** Column types whose cells are numbers, so a chart can plot them and a range can sum them. */
+export declare const NUMERIC_COLUMN_TYPES: readonly SheetColumnType[];
+export declare const SHEET_CHART_TYPES: readonly ["bar", "line", "area", "pie"];
+export type SheetChartType = (typeof SHEET_CHART_TYPES)[number];
+export interface SheetColumnFormat {
+    readonly type: SheetColumnType;
+    /** An ISO 4217 code, for a currency column. */
+    readonly currency?: string;
+    /** Digits after the decimal point, for numbers, currencies, and percents. */
+    readonly decimals?: number;
+}
+export interface WorkbookSheet {
+    readonly name: string;
+    /** Rows that stay in view as the sheet scrolls, the header row included. */
+    readonly frozenRows: number;
+    /** Columns that stay in view as the sheet scrolls sideways. */
+    readonly frozenColumns: number;
+    /** Formats by column name; a column not named here is text. */
+    readonly columns: Readonly<Record<string, SheetColumnFormat>>;
+    /** Widths in pixels by column name. */
+    readonly widths: Readonly<Record<string, number>>;
+}
+export interface WorkbookChart {
+    /** What `#chart=<name>` names in an address; lowercase letters, digits, and hyphens. */
+    readonly name: string;
+    readonly type: SheetChartType;
+    readonly sheet: string;
+    /** The column along the x axis, or a pie's slice labels. */
+    readonly x: string;
+    /** The plotted columns: one series each, or a pie's one value column. */
+    readonly y: readonly string[];
+    readonly title?: string;
+    /** Stack a bar or area chart's series. */
+    readonly stacked: boolean;
+}
+export interface Workbook {
+    readonly sheets: readonly WorkbookSheet[];
+    readonly charts: readonly WorkbookChart[];
+}
+/** Where a sheet's values are, in the artifact. */
+export declare function sheetFilePath(sheetName: string): string;
+/**
+ * Reads `workbook.json` into its full form: `"Revenue": "currency"` becomes
+ * `{ type: "currency" }`, a single `y` becomes a list, and defaults are filled. Returns what is
+ * wrong in words the author can act on. Whether the columns exist is checked against the CSVs.
+ */
+export declare function parseWorkbook(text: string): {
+    readonly workbook: Workbook;
+} | {
+    readonly error: string;
+};
+/** A number as a sheet stores it: plain digits, an optional sign, decimals, and exponent. */
+export declare function parseSheetNumber(value: string): number | undefined;
+/** A date as a sheet stores it: `YYYY-MM-DD`, optionally with an ISO 8601 time. */
+export declare function parseSheetDate(value: string): Date | undefined;
+//# sourceMappingURL=workbook.d.ts.map

package/dist/artifacts/workbook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workbook.d.ts","sourceRoot":"","sources":["../../src/artifacts/workbook.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,aAAa,kBAAkB,CAAA;AAE5C,eAAO,MAAM,kBAAkB,6EAQrB,CAAA;AACV,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEjE,+FAA+F;AAC/F,eAAO,MAAM,oBAAoB,EAAE,SAAS,eAAe,EAAsC,CAAA;AAEjG,eAAO,MAAM,iBAAiB,yCAA0C,CAAA;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE/D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC7D,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAClD;AAED,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;IAClB,yEAAyE;IACzE,QAAQ,CAAC,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAA;CAC1C;AAED,mDAAmD;AACnD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,GACX;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAa9D;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKlE;AAED,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAO9D"}

package/dist/auth/index.js

@@ -23,10 +23,10 @@ import {
   AuthRuntime2,
   SYSTEM_PRINCIPAL2,
   principalsEqual2
-} from "../chunk-vpq4shxz.js";
-import"../chunk-c85m1hyj.js";
-import"../chunk-v9xd5wzd.js";
-import"../chunk-es1gxsbf.js";
+} from "../chunk-nn5xnx3s.js";
+import"../chunk-447a5c0p.js";
+import"../chunk-s7jg7pmn.js";
+import"../chunk-f4pamkt9.js";
 import {
   DEFAULT_SESSION_COOKIE_NAME2,
   DEFAULT_CSRF_COOKIE_NAME2,
@@ -51,13 +51,13 @@ import {
   isInvitationDeliveryAuthStrategy2,
   isOidcAuthStrategy2
 } from "../chunk-hcbyfxbe.js";
-import"../chunk-d0bqz29d.js";
+import"../chunk-6vb4st8k.js";
 import"../chunk-v4jbb3rs.js";
-import"../chunk-hvsb78a1.js";
-import"../chunk-gsjm1wms.js";
-import"../chunk-jhm3zsa7.js";
-import"../chunk-8mx7qw3y.js";
-import"../chunk-z3y5kg1x.js";
+import"../chunk-8frc8a4j.js";
+import"../chunk-dhdha526.js";
+import"../chunk-dvd2fp9q.js";
+import"../chunk-6eqsgvxk.js";
+import"../chunk-wkv3h3q7.js";
 export {
   AuthRuntime2 as AuthRuntime,
   AuthRuntimeError2 as AuthRuntimeError,

package/dist/authorization/decision.d.ts

@@ -46,6 +46,8 @@ export type AuthzRequest = {
     readonly kind: "logs.observe";
 } | {
     readonly kind: "aiUsage.observe";
+} | {
+    readonly kind: "activity.observe";
 } | {
     readonly kind: "aiUsage.manage";
 } | {

package/dist/authorization/decision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decision.d.ts","sourceRoot":"","sources":["../../src/authorization/decision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,KAAK,4BAA4B,EAGlC,MAAM,4BAA4B,CAAA;AACnC,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAGhF,OAAO,KAAK,EAAE,oBAAoB,EAAc,MAAM,SAAS,CAAA;AAE/D,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GACjC;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAA;AAEvF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED,UAAU,iBAAiB;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IACpD,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAA;CAC9C;AAqDD,oEAAoE;AACpE,wBAAgB,QAAQ,CACtB,aAAa,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EACtD,OAAO,EAAE,YAAY,GACpB,aAAa,CAOf;AAED,wBAAgB,SAAS,CACvB,aAAa,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EACtD,OAAO,EAAE,YAAY,GACpB,OAAO,CAET;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAkBxF;AAED,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAI3F;AAED,2FAA2F;AAC3F,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,4BAA4B,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,CASpE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAGpF;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAE/F;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAE9F;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAUpF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,iBAAiB,GAAG;IAAE,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAA;CAAE,EACpF,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,MAAM,GAChB,IAAI,CAiBN"}
+{"version":3,"file":"decision.d.ts","sourceRoot":"","sources":["../../src/authorization/decision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,KAAK,4BAA4B,EAGlC,MAAM,4BAA4B,CAAA;AACnC,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAGhF,OAAO,KAAK,EAAE,oBAAoB,EAAc,MAAM,SAAS,CAAA;AAE/D,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GACjC;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE,GACrC;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAA;AAEvF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED,UAAU,iBAAiB;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IACpD,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAA;CAC9C;AAuDD,oEAAoE;AACpE,wBAAgB,QAAQ,CACtB,aAAa,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EACtD,OAAO,EAAE,YAAY,GACpB,aAAa,CAOf;AAED,wBAAgB,SAAS,CACvB,aAAa,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EACtD,OAAO,EAAE,YAAY,GACpB,OAAO,CAET;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAkBxF;AAED,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAI3F;AAED,2FAA2F;AAC3F,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,4BAA4B,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,CASpE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAGpF;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAE/F;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAE9F;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAUpF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,iBAAiB,GAAG;IAAE,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAA;CAAE,EACpF,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,MAAM,GAChB,IAAI,CAiBN"}

package/dist/authorization/grant-kinds.d.ts

@@ -8,9 +8,9 @@
  * entry in `GRANT_KINDS` plus the compile errors that forces at every consumer.
  */
 import type { GrantDefinition } from "../security/types";
-export type GrantKind = "view:object" | "view:dataset" | "edit:object" | "append:telemetry" | "apply:action" | "share:share" | "run:workflow" | "run:sync" | "run:pipeline" | "run:agent" | "observe:logs" | "observe:aiUsage" | "manage:connector" | "manage:aiUsage";
+export type GrantKind = "view:object" | "view:dataset" | "edit:object" | "append:telemetry" | "apply:action" | "share:share" | "run:workflow" | "run:sync" | "run:pipeline" | "run:agent" | "observe:logs" | "observe:aiUsage" | "observe:activity" | "manage:connector" | "manage:aiUsage";
 /** Capabilities over one project-wide surface: held or not, with no ids to select. */
-export type SingletonGrantKind = "run:agent" | "observe:logs" | "observe:aiUsage" | "manage:aiUsage";
+export type SingletonGrantKind = "run:agent" | "observe:logs" | "observe:aiUsage" | "observe:activity" | "manage:aiUsage";
 export type TargetedGrantKind = Exclude<GrantKind, SingletonGrantKind>;
 /** Registered id universes a grant kind ranges over, plus subtype expansion. */
 export interface GrantUniverse {

package/dist/authorization/grant-kinds.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grant-kinds.d.ts","sourceRoot":"","sources":["../../src/authorization/grant-kinds.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAExD,MAAM,MAAM,SAAS,GACjB,aAAa,GACb,cAAc,GACd,aAAa,GACb,kBAAkB,GAClB,cAAc,GACd,aAAa,GACb,cAAc,GACd,UAAU,GACV,cAAc,GACd,WAAW,GACX,cAAc,GACd,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,CAAA;AAEpB,sFAAsF;AACtF,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,cAAc,GAAG,iBAAiB,GAAG,gBAAgB,CAAA;AACpG,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAA;AAEtE,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3C,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACxC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACvC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACtC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACrC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C,QAAQ,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAA;CAClE;AAED,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,aAAa,EAAE,aAAa,CAAC,CAAA;AAE1E,UAAU,qBAAqB;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAA;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,uDAAuD;IACvD,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,CAAA;CAChC;AAED,UAAU,sBAAsB;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE;IACxB,QAAQ,EAAE,KAAK,IAAI,SAAS,GAAG,KAAK,SAAS,kBAAkB,GAC3D,sBAAsB,GACtB,qBAAqB;CA4E1B,CAAA;AAED,eAAO,MAAM,eAAe,EAA+B,SAAS,SAAS,EAAE,CAAA;AAC/E,eAAO,MAAM,yBAAyB,sBAErC,CAAA;AACD,eAAO,MAAM,wBAAwB,qBAEpC,CAAA;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,IAAI,kBAAkB,CAEhF;AAED,iDAAiD;AACjD,wBAAgB,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,SAAS,CAmB7D;AAED,gGAAgG;AAChG,MAAM,MAAM,iBAAiB,GAAG;KAC7B,KAAK,IAAI,SAAS,GAAG,KAAK,SAAS,kBAAkB,GAAG,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC;CAC/E,CAAA;AAED,wBAAgB,cAAc,IAAI,iBAAiB,CAiBlD"}
+{"version":3,"file":"grant-kinds.d.ts","sourceRoot":"","sources":["../../src/authorization/grant-kinds.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAExD,MAAM,MAAM,SAAS,GACjB,aAAa,GACb,cAAc,GACd,aAAa,GACb,kBAAkB,GAClB,cAAc,GACd,aAAa,GACb,cAAc,GACd,UAAU,GACV,cAAc,GACd,WAAW,GACX,cAAc,GACd,iBAAiB,GACjB,kBAAkB,GAClB,kBAAkB,GAClB,gBAAgB,CAAA;AAEpB,sFAAsF;AACtF,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,cAAc,GACd,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,CAAA;AACpB,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAA;AAEtE,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3C,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACxC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACvC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACtC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACrC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C,QAAQ,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAA;CAClE;AAED,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,aAAa,EAAE,aAAa,CAAC,CAAA;AAE1E,UAAU,qBAAqB;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAA;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,uDAAuD;IACvD,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,CAAA;CAChC;AAED,UAAU,sBAAsB;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE;IACxB,QAAQ,EAAE,KAAK,IAAI,SAAS,GAAG,KAAK,SAAS,kBAAkB,GAC3D,sBAAsB,GACtB,qBAAqB;CAiF1B,CAAA;AAED,eAAO,MAAM,eAAe,EAA+B,SAAS,SAAS,EAAE,CAAA;AAC/E,eAAO,MAAM,yBAAyB,sBAErC,CAAA;AACD,eAAO,MAAM,wBAAwB,qBAEpC,CAAA;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,IAAI,kBAAkB,CAEhF;AAED,iDAAiD;AACjD,wBAAgB,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,SAAS,CAmB7D;AAED,gGAAgG;AAChG,MAAM,MAAM,iBAAiB,GAAG;KAC7B,KAAK,IAAI,SAAS,GAAG,KAAK,SAAS,kBAAkB,GAAG,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC;CAC/E,CAAA;AAED,wBAAgB,cAAc,IAAI,iBAAiB,CAkBlD"}